Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/1d8fca-b462-4313-a523-e411b43dc68a/1/U_OdLyDi2bT5bL0TN-oy2lGNjsg.mft
File: U_OdLyDi2bT5bL0TN-oy2lGNjsg.mft (raw, json)
Hash identifier: EHQaooizo4ZAbmYjnAi6OXJ80+s1bx6wFtL8G1TnaHU=
Subject key identifier: 28:86:7C:1B:F5:D2:F0:8F:8B:58:21:3B:3B:80:D9:95:50:D5:62:CF
Authority key identifier: 53:F3:9D:2F:20:E2:D9:B4:F9:6C:BD:13:37:EA:32:DA:51:8D:8E:C8
Certificate issuer: /CN=53f39d2f20e2d9b4f96cbd1337ea32da518d8ec8
Certificate serial: 0198D473FAD9371BAC372FD86AACB6F78128
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U_OdLyDi2bT5bL0TN-oy2lGNjsg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/1d8fca-b462-4313-a523-e411b43dc68a/1/U_OdLyDi2bT5bL0TN-oy2lGNjsg.mft
Manifest number: 1646
Signing time: Sat 23 Aug 2025 01:03:47 +0000
Manifest this update: Sat 23 Aug 2025 01:03:47 +0000
Manifest next update: Sun 24 Aug 2025 01:03:47 +0000
Files and hashes: 1: CMb4sSALz-KpBLSc_havR1--Rcg.roa (hash: tSEX+cRvKAqr6srk3pPXDdRAbuuNHsu00QGpp8uCSYw=)
2: Lf-7J_CEiQS4b7WeR5Eaw4iyRLQ.roa (hash: 99fN5956ngv/TFkL8FxEzwLHD53MuB+d8ra8OJh/4dM=)
3: U_OdLyDi2bT5bL0TN-oy2lGNjsg.crl (hash: 6nyQqXj3Z58M9PiT47jsp041p3Tmmb8K11P6JgEC0WM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/1d8fca-b462-4313-a523-e411b43dc68a/1/U_OdLyDi2bT5bL0TN-oy2lGNjsg.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/1d8fca-b462-4313-a523-e411b43dc68a/1/U_OdLyDi2bT5bL0TN-oy2lGNjsg.mft
rsync://rpki.ripe.net/repository/DEFAULT/U_OdLyDi2bT5bL0TN-oy2lGNjsg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:03:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:fa:d9:37:1b:ac:37:2f:d8:6a:ac:b6:f7:81:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53f39d2f20e2d9b4f96cbd1337ea32da518d8ec8
Validity
Not Before: Aug 23 01:03:47 2025 GMT
Not After : Aug 24 01:03:47 2025 GMT
Subject: CN=28867c1bf5d2f08f8b58213b3b80d99550d562cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:b0:07:87:5a:0e:be:cd:25:bf:d6:0b:45:d7:
02:2c:2b:78:21:36:e7:72:cb:c9:9e:d4:d3:d9:34:
2d:6b:3f:a0:fb:3a:e6:6c:c5:c7:f9:31:8b:5c:35:
12:6c:65:e3:a9:46:eb:a4:bc:ad:d0:41:93:1a:06:
a5:b2:a3:27:78:3a:47:73:c6:61:2d:71:f1:4b:01:
e6:88:fc:a8:9a:0f:ec:ea:13:b7:44:cb:f9:9c:80:
c3:eb:32:98:58:eb:ff:12:26:c0:40:e4:e1:33:ff:
73:0f:be:0f:6c:01:51:41:d0:08:f3:31:8c:90:8f:
ae:1a:f7:93:8e:a4:7c:33:d6:3d:10:25:97:d8:f1:
cb:8f:73:8f:22:eb:29:57:6f:4f:e2:aa:f1:b8:1c:
23:f6:ae:ac:5c:86:53:e2:5d:80:95:22:80:1d:c5:
25:3e:91:60:3f:29:ab:aa:b6:00:09:7c:cd:c6:23:
c1:02:6e:00:80:69:fc:65:5b:7a:74:16:3d:a0:77:
8b:b0:c4:8b:6f:16:f6:cb:bd:fb:39:b2:f5:d5:9d:
ea:dc:6d:f7:7c:2a:95:78:28:49:6d:f7:e9:46:cd:
6f:00:7e:b8:aa:4c:f8:0d:8d:cd:ea:d3:5e:29:02:
d6:33:ac:3b:8d:e0:95:22:f7:56:b5:e2:7f:96:bd:
37:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:86:7C:1B:F5:D2:F0:8F:8B:58:21:3B:3B:80:D9:95:50:D5:62:CF
X509v3 Authority Key Identifier:
keyid:53:F3:9D:2F:20:E2:D9:B4:F9:6C:BD:13:37:EA:32:DA:51:8D:8E:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U_OdLyDi2bT5bL0TN-oy2lGNjsg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/1d8fca-b462-4313-a523-e411b43dc68a/1/U_OdLyDi2bT5bL0TN-oy2lGNjsg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/1d8fca-b462-4313-a523-e411b43dc68a/1/U_OdLyDi2bT5bL0TN-oy2lGNjsg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:74:90:0c:0c:31:d0:46:e4:73:2d:ce:22:57:3b:cd:22:74:
3a:62:d9:bd:89:5d:03:b4:d3:26:b9:95:ed:bf:2b:b5:4b:bd:
8c:6e:84:01:02:2f:09:00:f8:26:b2:7d:29:43:f7:c8:17:90:
aa:55:2e:c6:0b:78:b2:3c:9c:bf:e4:92:bc:7b:95:45:0a:de:
5f:35:f0:7e:72:15:2d:48:87:02:84:65:ca:52:2b:ba:3f:c6:
47:a0:70:c2:df:f2:20:a8:32:82:b4:15:28:ab:43:b6:fd:67:
c4:60:97:10:34:24:6e:38:03:2c:c5:a8:fc:55:7b:a3:ac:72:
60:88:88:82:7d:d3:bc:8b:f3:cf:1e:a8:42:76:8e:ea:85:3a:
64:18:2e:c4:59:3e:e8:3d:64:e1:34:f5:a5:5e:63:c0:83:27:
7d:05:70:6f:09:a8:99:ef:04:0f:76:b4:5d:05:ac:14:36:3d:
52:a4:3e:a9:ad:09:a0:8e:34:67:8c:4c:a9:f1:c9:13:2c:06:
13:57:01:d9:d5:b4:77:b1:ff:e3:05:14:a0:e6:20:c8:a6:a0:
3c:11:47:5b:ad:31:8e:33:6d:c1:d0:10:b8:b3:d5:68:fe:ff:
49:4f:24:7e:91:bb:3e:8f:8e:11:77:a5:0b:28:7c:ac:a7:54:
0d:56:e8:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:52:58 2025 by rpki-client